Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
25 matching records.
-
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0.
-
Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.
Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.
-
Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.
Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.
-
Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.
Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.
-
Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.
Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.
-
Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.
Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.
-
Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.
Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.
-
Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.
Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.
-
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
-
Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.
Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.
-
Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.
Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.
-
Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.
Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.
-
Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.
Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.
-
Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.
Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.
-
Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.
Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.
-
Unauthenticated PHP Object Injection in Mission <= 1.22 versions.
Unauthenticated PHP Object Injection in Mission <= 1.22 versions.
-
Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.
Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.
-
Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.
Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.
-
Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.
Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.
-
Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.
Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.
-
Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
-
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
-
Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.
Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.
-
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
-
Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=ThemeREX&limit=100. RSS for this section: feed.xml.